Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          xrS1JorgxeZWfNrNWIK1Hiscf+EZ7dDNxkTUBZYkSM0=
Subject key identifier:   95:34:17:F8:A9:AA:CD:B9:FF:EE:9D:40:67:A9:F6:65:B3:ED:0A:5F
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1C08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1BE7
Signing time:             Mon 30 Jun 2025 16:25:07 +0000
Manifest this update:     Mon 30 Jun 2025 16:25:07 +0000
Manifest next update:     Mon 07 Jul 2025 16:25:07 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: 7Tp1CqVDRrmLUnzyp+J5RRsBBhX0QVA/a0Xwa/dwAEg=)
                          2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: BbGcUbwtP+aZHPYce4149SbFzjL1B5hYLShi68qQcek=)
                          3: A3B7573EF01A11EE935E4329C4F9AE02.roa (hash: 3Fv5pT2XLktCrAEzJ7qYpsBgXpFiEdMr09ecsEjPwls=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: HlwCeu7nRQrhAHteeDH8/AzpstkCTMTYbzNnFUCPtI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 16:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7176 (0x1c08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Jun 30 16:25:07 2025 GMT
            Not After : Jul  7 16:25:07 2025 GMT
        Subject: CN=6862ba63-50e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:07:26:f2:eb:04:1f:65:96:20:9e:48:5a:
                    4a:cb:c8:f0:ac:68:a4:77:91:68:2b:47:40:e6:65:
                    5b:88:4e:20:69:53:6f:21:f9:4e:dd:f2:ae:4a:62:
                    b2:2b:54:bc:11:03:4b:86:e5:a8:cc:b7:1d:78:fd:
                    bd:3f:e2:96:8c:eb:ff:95:5f:90:48:fc:42:f4:01:
                    c8:71:25:0a:b5:bb:0c:c8:27:ea:96:b2:72:10:ad:
                    b4:51:ba:24:a2:a8:23:14:42:65:66:10:e2:78:8b:
                    e8:b1:1c:3f:33:19:19:5f:b5:8c:ae:63:d7:dc:2b:
                    da:4a:56:8f:f5:78:84:0e:27:e6:b1:6e:87:e0:68:
                    a6:86:d6:85:15:22:85:2f:1d:f3:16:05:92:67:08:
                    16:63:e2:0f:3f:5b:27:ae:6a:9f:9c:0a:53:d0:d9:
                    08:2d:c4:16:30:e9:96:e1:80:e6:ef:5d:07:03:69:
                    33:15:82:a6:f2:c1:fd:d3:d8:6b:b2:ee:57:38:00:
                    2d:5b:68:0b:ba:13:7c:40:8c:07:f2:5a:de:e2:a1:
                    03:86:c4:b3:65:9a:a5:17:9f:cd:e0:48:5e:e1:c3:
                    ca:15:fb:3f:27:2a:27:de:fd:58:36:65:ee:81:71:
                    b7:a2:ca:45:4c:ce:80:d4:a7:0e:f8:5e:7a:f5:b3:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:17:F8:A9:AA:CD:B9:FF:EE:9D:40:67:A9:F6:65:B3:ED:0A:5F
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:37:97:6e:5f:84:f8:5d:69:27:c6:0f:d6:94:59:34:9e:cf:
         b4:1a:72:76:0a:79:12:17:06:45:8b:61:79:72:e1:aa:ce:20:
         f6:fe:39:7e:5f:c1:5c:62:2d:54:30:2a:f2:4c:c8:4a:3b:60:
         50:86:8b:0e:f4:4f:d3:9b:04:61:d1:54:75:e8:d3:34:39:07:
         f3:27:20:88:3c:2b:00:ba:16:27:aa:da:1b:c4:1e:5b:7e:cf:
         6f:44:dc:17:64:c7:33:f9:92:d6:e1:82:92:9f:7a:90:a2:2d:
         32:02:a2:c8:87:1e:1d:fd:a6:6f:70:b3:7d:d3:67:e1:02:45:
         0e:ad:75:61:8a:58:f1:98:14:cd:35:7d:a5:f3:9b:dc:0e:d2:
         29:2a:f7:60:a8:b5:92:64:d3:ce:61:f8:e6:9c:bf:25:47:b5:
         10:44:04:ab:bf:3f:8c:8f:73:09:54:57:82:17:0f:01:45:ee:
         f5:91:34:15:55:5d:4b:91:ed:04:ed:1d:a7:ba:65:bb:c7:e5:
         0b:d2:19:24:ee:00:c8:f8:ad:24:86:e0:98:8e:26:0e:52:27:
         da:5a:1f:39:b8:4b:d1:2a:25:b2:f6:18:4f:5e:a6:3f:7c:17:
         00:36:be:44:45:38:61:46:27:2d:32:5f:85:db:2a:35:96:a6:
         ca:4e:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:00:33 2025 by rpki-client